$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft File: AFF600EA088C0C0C3160D75A952506A94913C8A8.mft (raw, json) Hash identifier: XMeyHO2quaEmt5gkHIJJntH7RpIfl3Wyh4pRZdzYNKY= Subject key identifier: F4:70:1F:91:10:31:D8:07:FF:C6:24:19:F1:99:2A:EF:74:56:4A:4A Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Certificate serial: 74D4AFB6761E1E6F4EC9804F8AE75D4296D8BA0B Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft Manifest number: 020A Signing time: Mon 28 Apr 2025 10:40:01 +0000 Manifest this update: Mon 28 Apr 2025 10:35:01 +0000 Manifest next update: Tue 29 Apr 2025 10:45:01 +0000 Files and hashes: 1: 3138372e3131302e3137342e302f32342d3234203d3e203533313138.roa (hash: w84Anik40z83DFX3yj+lx1Zs+2i9lRNW4FQ+f7ZHMcc=) 2: 3137372e31322e3131322e302f32302d3230203d3e203533313138.roa (hash: jN25SYmZKfd1sPcHySVfXCIHkpd4KxWXs3ZwAiKGYuw=) 3: 3138372e3131302e3137352e302f32342d3234203d3e203533313138.roa (hash: QtcVu1XQAYUwQTPLuTFKN1FgEEgoxsLavRGLPUw9mRs=) 4: AFF600EA088C0C0C3160D75A952506A94913C8A8.crl (hash: nH4oOKbeUvveadETRME99B0pvQmX9KH0DY6s5CY40QQ=) 5: 3138372e3131302e3136302e302f32302d3230203d3e203533313138.roa (hash: e1vivfQZj0tcl6IkDpsHaEBQIUUaJo05ko9IXkK3Vy4=) 6: 3137372e31322e39362e302f32302d3230203d3e203533313138.roa (hash: h2Oqn3qxt0UufdhIxmkJFNRD7NQUg5lP6kk9tXGbGJ4=) 7: 3137372e31322e3132332e302f32342d3234203d3e203533313138.roa (hash: Kq+MibEAzFGTBoCjjqLDshi/5eMUdsSQZ+YXEELUOww=) 8: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (hash: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=) 9: 3137372e31322e3132322e302f32342d3234203d3e203533313138.roa (hash: FPOIK0HoDwaAUy65NC3MdxlbC9Je6s9SlFjedqzplPg=) Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Apr 2025 10:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d4:af:b6:76:1e:1e:6f:4e:c9:80:4f:8a:e7:5d:42:96:d8:ba:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8 Validity Not Before: Apr 28 10:35:01 2025 GMT Not After : Apr 29 10:45:01 2025 GMT Subject: CN=F4701F911031D807FFC62419F1992AEF74564A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:87:1b:65:2e:23:34:83:ab:71:b8:9e:56:10: 03:1e:54:63:31:9b:98:22:86:75:8b:92:4b:16:d6: 66:4b:65:73:45:8a:69:ea:28:af:3d:b4:96:0b:c3: 2c:a3:3e:b3:60:93:14:2e:9c:fe:96:cc:b1:35:d8: 3f:91:bf:0b:ba:72:80:d8:61:6d:c1:3c:1c:dc:9b: 47:d3:49:94:b1:40:ac:80:52:af:8c:b9:3e:83:4f: b7:fc:b5:e9:38:d0:63:7c:55:cc:eb:13:57:d3:89: 66:22:17:23:57:95:a9:59:fe:c2:73:c7:d6:18:c9: a8:2c:22:5f:93:2e:e6:46:48:0b:6c:90:f5:94:4b: 1b:b3:3b:88:ef:81:35:dd:55:c0:a0:28:d5:b3:ab: a4:c6:86:f1:84:b7:ec:10:2b:f9:2a:9e:fa:31:ba: 96:fe:63:d7:7a:53:92:1a:19:a4:93:c3:d0:9e:f2: a3:ca:42:95:a0:8c:cf:9a:45:e8:21:0e:d8:be:0e: 7e:d1:f4:04:2c:02:e8:fb:0b:bc:8d:1c:45:b4:1c: 8c:12:29:b2:d0:21:6f:70:3c:16:cd:05:5e:3a:ec: b6:70:94:e0:fa:b1:d0:ee:e6:f8:50:6c:f8:42:e8: 4e:e1:6c:3c:55:6b:37:7f:90:f4:3d:cd:7b:78:14: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:70:1F:91:10:31:D8:07:FF:C6:24:19:F1:99:2A:EF:74:56:4A:4A X509v3 Authority Key Identifier: keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:12:84:4f:19:9a:99:42:81:46:ba:3a:4b:07:83:59:e7:34: b8:aa:b7:e8:61:a9:f7:59:3b:ed:66:84:d9:87:8f:83:ce:8f: 9e:a9:e2:10:c0:a5:b5:49:ba:a1:9e:78:70:42:ce:fe:c3:b6: df:77:e3:08:82:86:27:87:f7:e9:70:2a:86:c5:f9:3c:26:a2: ad:d2:44:de:d2:e9:5a:03:75:5e:95:52:7f:12:01:71:51:90: d5:ae:b4:fb:dc:20:4b:18:e1:b4:c1:7a:de:f6:02:d2:6a:22: ce:a9:17:61:36:3c:15:a5:53:92:38:15:e4:52:b1:e3:1e:a3: c3:4c:7c:c7:93:5e:bf:35:3f:a6:35:87:6b:57:15:2b:85:95: 7d:bd:4f:20:a8:b1:f3:4a:ac:1b:06:75:bb:61:5b:58:ad:5d: 81:e3:67:29:ab:e2:50:ca:d2:94:2d:47:c2:f8:aa:1a:ea:8b: 7c:ee:a8:21:bf:a6:02:c2:d0:83:6a:fd:0f:cc:ec:ca:e7:a2: 0b:fa:fd:a1:3a:82:5a:24:73:42:f1:b3:3c:a1:4c:44:51:af: 19:61:ff:e8:c9:88:8e:bf:c1:29:21:ba:8d:4c:43:62:8f:ed: 04:10:fa:1a:b1:4c:76:6a:49:1d:63:7d:52:bd:2e:fa:e4:ed: 98:7a:40:45 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgIUdNSvtnYeHm9OyYBPiuddQpbYugswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUZGNjAwRUEwODhDMEMwQzMxNjBENzVBOTUyNTA2QTk0 OTEzQzhBODAeFw0yNTA0MjgxMDM1MDFaFw0yNTA0MjkxMDQ1MDFaMDMxMTAvBgNV BAMTKEY0NzAxRjkxMTAzMUQ4MDdGRkM2MjQxOUYxOTkyQUVGNzQ1NjRBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDchxtlLiM0g6txuJ5WEAMeVGMx m5gihnWLkksW1mZLZXNFimnqKK89tJYLwyyjPrNgkxQunP6WzLE12D+Rvwu6coDY YW3BPBzcm0fTSZSxQKyAUq+MuT6DT7f8tek40GN8VczrE1fTiWYiFyNXlalZ/sJz x9YYyagsIl+TLuZGSAtskPWUSxuzO4jvgTXdVcCgKNWzq6TGhvGEt+wQK/kqnvox upb+Y9d6U5IaGaSTw9Ce8qPKQpWgjM+aReghDti+Dn7R9AQsAuj7C7yNHEW0HIwS KbLQIW9wPBbNBV467LZwlOD6sdDu5vhQbPhC6E7hbDxVazd/kPQ9zXt4FL5xAgMB AAGjggJZMIICVTAdBgNVHQ4EFgQU9HAfkRAx2Af/xiQZ8Zkq73RWSkowHwYDVR0j BBgwFoAUr/YA6giMDAwxYNdalSUGqUkTyKgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQ Y2ovMS9BRkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FGRjYwMEVBMDg4QzBDMEMz MTYwRDc1QTk1MjUwNkE5NDkxM0M4QTguY2VyMIGdBggrBgEFBQcBCwSBkDCBjTCB igYIKwYBBQUHMAuGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v QVRHMXNMOXJEWDZoalhSMzdheHNYblNockVRaHVqWmdWd0JTSmFpYUpQY2ovMS9B RkY2MDBFQTA4OEMwQzBDMzE2MEQ3NUE5NTI1MDZBOTQ5MTNDOEE4Lm1mdDAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUA MAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOC AQEAuRKETxmamUKBRro6SweDWec0uKq36GGp91k77WaE2YePg86PnqniEMCltUm6 oZ54cELO/sO233fjCIKGJ4f36XAqhsX5PCairdJE3tLpWgN1XpVSfxIBcVGQ1a60 +9wgSxjhtMF63vYC0moizqkXYTY8FaVTkjgV5FKx4x6jw0x8x5NevzU/pjWHa1cV K4WVfb1PIKix80qsGwZ1u2FbWK1dgeNnKaviUMrSlC1HwviqGuqLfO6oIb+mAsLQ g2r9D8zsyueiC/r9oTqCWiRzQvGzPKFMRFGvGWH/6MmIjr/BKSG6jUxDYo/tBBD6 GrFMdmpJHWN9Ur0u+uTtmHpARQ== -----END CERTIFICATE-----Generated at Mon Apr 28 13:04:58 2025 by rpki-client on console.sobornost.net